Softstack
Products
3- 2 CVEs
- 1 CVE
- 1 CVE
Recent CVEs
4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-41331 | Cri | 0.64 | 9.8 | 0.01 | Sep 12, 2023 | SOFARPC is a Java RPC framework. Versions prior to 5.11.0 are vulnerable to remote command execution. Through a carefully crafted payload, an attacker can achieve JNDI injection or system command execution. In the default configuration of the SOFARPC framework, a blacklist is… | ||
| CVE-2024-46983 | Cri | 0.57 | 9.8 | 0.01 | Sep 19, 2024 | sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd. The SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But there is a gadget chain that can bypass the… | ||
| CVE-2024-23636 | Cri | 0.57 | 9.8 | 0.01 | Jan 23, 2024 | SOFARPC is a Java RPC framework. SOFARPC defaults to using the SOFA Hessian protocol to deserialize received data, while the SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But, prior to… | ||
| CVE-2005-2857 | 0.03 | — | 0.03 | Sep 8, 2005 | Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy). |
- risk 0.64cvss 9.8epss 0.01
SOFARPC is a Java RPC framework. Versions prior to 5.11.0 are vulnerable to remote command execution. Through a carefully crafted payload, an attacker can achieve JNDI injection or system command execution. In the default configuration of the SOFARPC framework, a blacklist is…
- risk 0.57cvss 9.8epss 0.01
sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd. The SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But there is a gadget chain that can bypass the…
- risk 0.57cvss 9.8epss 0.01
SOFARPC is a Java RPC framework. SOFARPC defaults to using the SOFA Hessian protocol to deserialize received data, while the SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But, prior to…
- CVE-2005-2857Sep 8, 2005risk 0.03cvss —epss 0.03
Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).